CVE-2025-57631

CriticalCVSS 9.8

Published: 16/09/2025(UTC)Updated: 04/07/2026(UTC)Translated: 05/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module.

An attacker can gain unauthorized access to the database, steal or modify data, and in extreme cases take over the server.

Immediately update TDuckCloud to the latest version and apply parameterized SQL queries in the file upload module.

Original NVD description (English source)

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module